Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/673fc5f1-83f6-37bf-a155-4138a1b7a18e.roa
File:                     673fc5f1-83f6-37bf-a155-4138a1b7a18e.roa (raw, json)
Hash identifier:          vEFPoHo4ewo9T9HL+BsySQGXsfMMLKNKtWbM1OXME6c=
Subject key identifier:   51:9C:1B:A2:31:FE:78:FB:ED:9B:34:8A:38:70:13:1D:FA:72:51:E4
Certificate issuer:       /CN=2dbf604f-24b0-426e-809d-e65b08be5d50
Certificate serial:       010D0C9F432858496E498A3BC0BCFF4A368A8800
Authority key identifier: 9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/673fc5f1-83f6-37bf-a155-4138a1b7a18e.roa
Signing time:             Sun 06 Apr 2025 01:00:47 +0000
ROA not before:           Sun 06 Apr 2025 01:00:47 +0000
ROA not after:            Sat 05 Jul 2025 01:00:47 +0000
asID:                     16433
IP address blocks:        160.79.16.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 18 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6e:49:8a:3b:c0:bc:ff:4a:36:8a:88:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2dbf604f-24b0-426e-809d-e65b08be5d50
        Validity
            Not Before: Apr  6 01:00:47 2025 GMT
            Not After : Jul  5 01:00:47 2025 GMT
        Subject: CN=f88cdf9e-a4de-4861-80cf-a5fd48972215
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c9:6e:b1:3a:8c:94:6a:a6:66:e0:39:b9:27:
                    e6:b5:8c:5d:ea:4c:12:d7:bd:97:0b:05:11:8c:47:
                    65:15:88:2b:12:4b:31:6d:6e:4d:1f:2a:8b:08:67:
                    6c:7b:ad:2b:16:77:f2:e6:57:c5:db:10:e1:6d:41:
                    51:f3:31:ed:1a:92:cf:5d:58:2e:e0:55:77:25:c8:
                    c0:0a:09:8c:80:6e:af:b2:19:5c:c3:f5:0f:10:97:
                    ac:e0:8a:fc:71:02:86:3d:d9:39:45:da:ab:59:d3:
                    53:93:39:76:2b:f7:7e:d8:ff:67:9d:13:56:8b:98:
                    10:2a:a1:73:48:5d:0a:e4:60:44:13:73:64:b5:09:
                    78:53:dd:50:45:bf:02:2d:69:7c:39:16:3d:5d:2c:
                    d4:68:42:23:0c:d1:bc:b9:39:30:40:63:8f:e8:96:
                    6d:7d:e9:71:e2:90:cf:86:4f:2f:4b:88:d5:52:fe:
                    00:7e:34:d0:28:99:5c:d9:31:7f:9e:86:98:2f:65:
                    bf:82:97:8b:0a:f9:a6:1e:d2:45:c7:d3:29:70:5b:
                    ef:0b:01:94:85:5b:94:73:e0:7a:3d:4f:d4:b6:b5:
                    24:68:c4:c0:47:0b:fb:b7:fb:5c:61:1a:d7:6d:60:
                    aa:ab:4e:cd:13:75:be:8e:da:ec:a4:bf:c1:e9:67:
                    46:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:9C:1B:A2:31:FE:78:FB:ED:9B:34:8A:38:70:13:1D:FA:72:51:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/673fc5f1-83f6-37bf-a155-4138a1b7a18e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl

            X509v3 Authority Key Identifier:
                keyid:9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.79.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:9e:b1:33:31:aa:d7:ad:64:0b:b9:a6:29:e8:c0:d5:4a:f6:
         3e:68:6b:0a:7c:37:26:30:b9:1e:35:91:ca:0d:73:2d:28:db:
         90:71:cc:7f:d2:0c:0b:6c:0c:09:43:7a:61:7b:c2:3c:44:cf:
         53:10:d8:95:84:5a:ad:42:c3:54:91:c7:2f:79:06:ef:a2:53:
         4d:84:dc:6b:d8:21:98:29:6f:8f:14:78:c0:48:e2:87:5a:db:
         73:83:2f:8b:05:c9:00:11:bc:02:2e:58:9b:98:44:ff:2e:28:
         c2:68:a8:f7:fe:b7:8b:86:bb:86:1e:16:a5:81:72:01:ae:c5:
         ee:08:c1:ab:8b:53:ad:34:2e:57:b8:fa:8b:8c:fb:ce:39:d1:
         dd:8c:60:9c:b0:2f:c7:07:5a:c7:f0:55:ea:d5:76:b4:44:c6:
         84:88:b4:17:4f:ab:52:03:65:a0:4b:46:10:5c:99:ea:fb:29:
         26:d6:e4:8c:0f:d9:d5:50:f4:b4:4c:d5:21:3b:d0:c0:11:76:
         2e:7d:3c:19:95:55:32:4b:53:05:ac:02:05:58:64:70:0a:98:
         94:3b:50:97:19:3f:90:82:92:3f:0a:0c:62:f4:31:d1:62:59:
         c4:76:a9:58:04:e6:b1:6a:c3:6b:c1:3a:15:d9:50:3e:d7:a5:
         46:07:52:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:38:18 2025 by rpki-client